{"id":2224362,"url":"https://alion.io/job/caesars-associate-security-architect","title":"Associate Security Architect","company":{"id":1758419,"name":"Caesars Entertainment","domain":"caesars.com","url":"https://alion.io/company/caesars-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":75,"open_postings":69,"ghost_share":0,"stale_share":0.986,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Las Vegas, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":48000,"max_usd":103000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":265},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PCI DSS","optional":false},{"name":"STRIDE","optional":false},{"name":"AI Agents","optional":true},{"name":"AWS","optional":true},{"name":"AWS Bedrock","optional":true},{"name":"AWS Bedrock AgentCore","optional":true},{"name":"Azure","optional":true},{"name":"Checkov","optional":true},{"name":"CI/CD","optional":true},{"name":"Copilot","optional":true},{"name":"GitLab","optional":true},{"name":"GitLab CI","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"LLM Guardrails","optional":true},{"name":"Model Context Protocol","optional":true},{"name":"RAG","optional":true},{"name":"Terraform","optional":true},{"name":"tfsec","optional":true}],"status":"live","first_seen_at":"2026-10-09T00:00:00Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-12T20:29:35Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Enterprise Security Architecture provides centralized security oversight, risk assessment, and pattern guidance across Caesars Entertainment. Importantly, ESA does not design business solutions - business units and solution teams own solution architecture. ESA reviews those solutions for security risk, develops reusable security patterns, and advises teams during design.\nAs an Associate Security Architect, you’ll be the engine behind that review-and-guidance function. You’ll support Security Architecture Reviews (SARs) and Business Impact Assessments (BIAs), help maintain the ESAF security pattern library, and grow into an advisory role under the mentorship of senior architects. This is a strong entry point into enterprise security architecture for someone with a security analyst, GRC, SOC, or solution-engineering background.\nWhat success looks like in the first year:\nIndependently triages and drafts SAR review notes with minimal rework\n\nProduces accurate BIAs and risk categorizations under light supervision\n\nMeaningfully improves the currency and usability of the pattern library\n\nBuilds trusted working relationships with solution and infrastructure teams\n\n Security Architecture Review (SAR) support\nIntake and triage incoming review requests against SAR trigger criteria\n\nDraft review notes: document proposed architectures, flag security gaps, and map recommended controls to ESAF patterns\n\nTrack that solution teams implement recommended controls and respond to review feedback\n\nSit in on threat-modeling sessions and consultations to build architectural judgment\n\nRisk assessment support\nHelp conduct Business Impact Assessments (BIAs) and security risk categorization under senior review\n\nApply the risk-based BIA security checklists so control requirements scale appropriately to system risk\n\nPrepare risk-assessment documentation as an input to decision-making\n\nGovernance boundary: In the ESA model, the team assesses risk but does not accept it. Risk acceptance and security exceptions are governed by the Exception Management Policy and decided by senior management / CIO. You’ll produce the assessment, not the acceptance decision.\n\nPattern & standards maintenance\nMaintain and update ESAF security patterns, reference architectures, and control libraries across domains (AI, application, cloud, data, endpoint, GRC, IAM, infrastructure, network)\n\nKeep documentation accurate, usable, and current - pattern quality and adoption are measured outcomes for the team\n\nCollaboration & governance\nParticipate in weekly architecture reviews, monthly pattern updates, and knowledge-sharing sessions\n\nCommunicate security requirements clearly to solution teams the ESA function influences but does not control\n\n Required\n1-3 years in a security-adjacent role (security analyst, GRC, SOC, IT audit, or solution/security engineering)\n\nWorking knowledge of core security domains: IAM, network, cloud, application, and data security - breadth valued over deep single-stack specialization\n\nFamiliarity with at least one threat-modeling approach (e.g., STRIDE) or the MITRE ATT&CK framework\n\nAwareness of regulatory frameworks relevant to gaming/hospitality: PCI-DSS, SOX, gaming commission requirements, and privacy laws (GDPR/CCPA)\n\nStrong written communication - the role’s output is reviews, assessments, and documentation others must act on\n\nCollaborative, diplomatic working style; comfortable influencing teams you don’t have authority over\n\nNice to have\nCloud security fundamentals, with AWS emphasis - the platform’s agentic/AI stack is built on Amazon Bedrock, so AWS IAM, VPC endpoints (PrivateLink), and KMS familiarity are especially valuable\n\nExposure to AWS Bedrock and agentic AI security - Bedrock Guardrails, Knowledge Base / RAG security, Bedrock Agents, and Bedrock AgentCore (Gateway/Runtime/Identity) with MCP servers. This is where the team’s AI security work actually lives (Bedrock-based, not Copilot-based), and it’s a currently high-demand area.\n\nUnderstanding of MCP (Model Context Protocol) security concepts - agent-to-tool authentication (JWT/OAuth 2.0), tool-level access control, and centralized audit logging\n\nGitLab CI/CD security - GitLab is the primary platform for code and pipelines across the enterprise. Familiarity with pipeline hardening, protected branches/environments and merge-request approvals, masked/protected CI/CD variables, GitLab Secret Detection and Dependency Scanning, and secrets management (HashiCorp Vault / AWS Secrets Manager) is directly applicable to the reviews this role supports.\n\nInfrastructure-as-Code security exposure (Terraform with tfsec/checkov, encrypted/locked state) - IaC pipelines are in scope for ESA review\n\nSecurity certifications (Security+, AWS/Azure security associate, or progress toward CISSP/CCSP)\n\nExperience with SDLC/DevOps and CI/CD security integration","description_format":"text","description_chars":4860,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Travel & Tourism","Adventure Tourism"],"lifecycle":[{"event":"open","at":"2026-10-10T14:37:22Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":3,"expected_fill_days":25,"reasons":["conf:3","stale_co","win:early","comp:junior,brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/caesars-associate-security-architect","json_url":"https://alion.io/job/caesars-associate-security-architect.json","meta":{"generated_at":"2026-10-12T20:44:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33725,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1758419},"rest":"https://alion.io/mcp/rest/get_company?id=1758419"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcaesars-associate-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcaesars-associate-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcaesars-associate-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/caesars-associate-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcaesars-associate-security-architect"}]}